[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fEkKW7P1WlDpregs_SKf6ZM52pDkv-uL1rreYpFYksoE":3,"g5a-risk:CVE-2024-38226":141},{"success":4,"data":5,"meta":138},true,{"cveId":6,"title":7,"description":8,"shortDescription":8,"publishedDate":9,"lastModified":10,"cvssScore":11,"cvssVector":12,"cvssMetrics":13,"epssScore":31,"epssPercentile":25,"epssTimeSeries":32,"severity":33,"affectedProducts":34,"affectedProductsCount":48,"references":49,"referencesCount":61,"weaknesses":62,"weaknessesCount":71,"isActivelyExploited":4,"cisaInfo":72,"otxData":25,"relatedBlogPosts":74,"seoMetadata":75,"configurations":100,"relatedVendorCves":122,"notableEvents":123},"CVE-2024-38226","What is CVE-2024-38226?","Microsoft Publisher Security Feature Bypass Vulnerability","2024-09-10T17:15:25.267","2026-08-10T16:19:04.13",7.3,"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":14,"CVSSMetricV30":28,"CVSSMetricV2":29,"CVSSMetricV40":30},[15],{"Source":16,"Type":17,"CVSSData":18,"ExploitabilityScore":26,"ImpactScore":27},"secure@microsoft.com","Secondary",{"Version":19,"VectorString":12,"AttackVector":20,"AttackComplexity":21,"PrivilegesRequired":21,"UserInteraction":22,"Scope":23,"ConfidentialityImpact":24,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":11,"BaseSeverity":24,"ExploitCodeMaturity":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"TemporalSeverity":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":25,"ModifiedAttackVector":25,"ModifiedAttackComplexity":25,"ModifiedPrivilegesRequired":25,"ModifiedUserInteraction":25,"ModifiedScope":25,"ModifiedConfidentialityImpact":25,"ModifiedIntegrityImpact":25,"ModifiedAvailabilityImpact":25,"EnvironmentalScore":25,"EnvironmentalSeverity":25},"3.1","LOCAL","LOW","REQUIRED","UNCHANGED","HIGH",null,1.3,5.9,[],[],[],0.02667,[31,31,31,31,31,31,31],"High",[35,40,44],{"vendor":36,"product":37,"version":38,"criteria":39,"vulnerable":4},"microsoft","office_2019","-","cpe:2.3:a:microsoft:office_2019:-:*:*:*:*:*:x64:*",{"vendor":36,"product":41,"version":42,"criteria":43,"vulnerable":4},"office_long_term_servicing_channel","2021","cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:*:x64:*",{"vendor":36,"product":45,"version":46,"criteria":47,"vulnerable":4},"publisher","2016","cpe:2.3:a:microsoft:publisher:2016:*:*:*:*:*:x64:*",3,[50,56],{"url":51,"source":52,"tags":53},"https:\u002F\u002Fmsrc.microsoft.com\u002Fupdate-guide\u002Fvulnerability\u002FCVE-2024-38226","Microsoft",[54,55],"Patch","Vendor Advisory",{"url":57,"source":58,"tags":59},"https:\u002F\u002Fwww.cisa.gov\u002Fknown-exploited-vulnerabilities-catalog?field_cve=CVE-2024-38226","CISA",[60],"US Government Resource",2,[63],{"id":64,"name":65,"description":66,"extendedDescription":67,"status":68,"abstraction":69,"structure":70},"CWE-693","Protection Mechanism Failure","The product does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product.","This weakness covers three distinct situations. A \"missing\" protection mechanism occurs when the application does not define any mechanism against a certain class of attack. An \"insufficient\" protection mechanism might provide some defenses - for example, against the most common attacks - but it does not protect against everything that is intended. Finally, an \"ignored\" mechanism occurs when a mechanism is available and in active use within the product, but the developer has not applied it in some code path.","Draft","Pillar","Simple",1,{"shortDescription":73,"requiredAction":73,"vulnerabilityName":73,"dateAdded":25},"",[],{"title":76,"metaDescription":77,"keywords":78,"canonicalUrl":79,"structuredData":80},"What is CVE-2024-38226? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2024-38226, a high severity cyber security vulnerability from 2024. Microsoft Publisher Security Feature Bypass Vulnerability G...","CVE-2024-38226, CVE-2024-38226 vulnerability, CVE-2024-38226 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2024, CVSS score, exploit, patch, remediation, microsoft security, office_2019 vulnerability, office_long_term_servicing_channel vulnerability, publisher vulnerability","\u002Fwhat-is\u002Fcve-2024-38226",{"@context":81,"@type":82,"headline":76,"description":77,"datePublished":9,"dateModified":10,"author":83,"publisher":87,"about":91,"mainEntityOfPage":95,"articleSection":98,"keywords":99},"https:\u002F\u002Fschema.org","TechArticle",{"@type":84,"name":85,"url":86},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":84,"name":85,"url":86,"logo":88},{"@type":89,"url":90},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":92,"name":6,"description":93,"additionalType":94},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":96,"@id":97},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2024-38226","Cybersecurity","CVE-2024-38226, CVE-2024-38226 vulnerability, CVE-2024-38226 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[101],{"Operator":25,"Negate":25,"Nodes":102},[103],{"Operator":104,"Negate":105,"CPEMatch":106},"OR",false,[107,109,112,114,117,119],{"Vulnerable":4,"Criteria":39,"MatchCriteriaID":108,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"241CDE2B-ABD0-4EFF-8D73-1766E32FA20F",{"Vulnerable":4,"Criteria":110,"MatchCriteriaID":111,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"cpe:2.3:a:microsoft:office_2019:-:*:*:*:*:*:x86:*","14D63E3F-A431-4DD8-979F-811E8DAC423D",{"Vulnerable":4,"Criteria":43,"MatchCriteriaID":113,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"75F7306B-D1DA-48C2-AF87-4480E161D794",{"Vulnerable":4,"Criteria":115,"MatchCriteriaID":116,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:*:x86:*","BA9BCD55-F71E-4920-B906-A1386843776A",{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":118,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"CB45982E-03C9-404B-BD22-2D096E561802",{"Vulnerable":4,"Criteria":120,"MatchCriteriaID":121,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"cpe:2.3:a:microsoft:publisher:2016:*:*:*:*:*:x86:*","03D5F104-880A-4FAF-938A-78DCE55AAD98",[],[124,131],{"id":125,"eventType":126,"eventTime":127,"details":128,"label":129,"color":130},"e7ea1eff-6cbf-4c92-aae4-8b061ad515fd","LOW_EPSS_DELTA","2025-06-11T10:09:58.315289+00:00","Daily EPSS score decreased by 0.574 on 2024-09-12","EPSS Score Decreased","green",{"id":132,"eventType":133,"eventTime":134,"details":135,"label":136,"color":137},"3e42cbcd-4255-4524-a37d-fd836ea3fe69","HIGH_EPSS_DELTA","2025-11-19T04:04:39.06995+00:00","Daily EPSS score increased by 0.353 on 2024-09-12","EPSS Score Increased","red",{"lastModified":10,"cacheTime":139,"version":140},1792272321102,"2.0",{"score":142,"band":33,"action":143,"scoredAt":144},74,"Emergency patch","2026-10-16T07:03:46.145636+00:00"]